An attacker targets the city's CI/CD system that builds and deploys the citizen services portal. Which pipeline protections should the security architect prioritize?

CI/CD pipelines are high-value attack paths because compromise can inject malicious artifacts into trusted deployment channels. Protecting credentials and secrets, requiring signed artifacts, and enforcing deployment authorization gates reduce that risk. Pipeline security is part of Domain 8 software assurance, not merely DevOps convenience.